lov-api-creator
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local Python scripts (e.g.,
scripts/validate_skill.py) and standard shell utilities (ln -s,mkdir) for installation and validation tasks. These operations are restricted to the local environment and are standard for a development tool designed to interact with local code repositories. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes local project configuration files, such as
pages.jsonandmanifest.json, to inform its code generation process. While these files are ingestion points for external data, the skill mitigates risk by emphasizing manual code review, providing a validation script, and following established project patterns (e.g., uni-api and uni-app conventions).
Audit Metadata